mirror of
https://github.com/snipe/snipe-it.git
synced 2026-02-04 17:45:31 +00:00
Merge pull request #18439 from grokability/#18135-better-handle-cli-importer-permissions
Fixed #18135 - only unset sensitive variables in the web UI importer
This commit is contained in:
@ -10,6 +10,7 @@ use App\Notifications\WelcomeNotification;
|
|||||||
use Illuminate\Support\Facades\Gate;
|
use Illuminate\Support\Facades\Gate;
|
||||||
use Illuminate\Support\Facades\Log;
|
use Illuminate\Support\Facades\Log;
|
||||||
use Illuminate\Support\Facades\Password;
|
use Illuminate\Support\Facades\Password;
|
||||||
|
use Illuminate\Support\Facades\Auth;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* This is ONLY used for the User Import. When we are importing users
|
* This is ONLY used for the User Import. When we are importing users
|
||||||
@ -102,8 +103,7 @@ class UserImporter extends ItemImporter
|
|||||||
|
|
||||||
$this->log('Updating User');
|
$this->log('Updating User');
|
||||||
|
|
||||||
// Todo - check that this works
|
if (Auth::check() && (!Gate::allows('canEditAuthFields', $user))) {
|
||||||
if (!Gate::allows('canEditAuthFields', $user)) {
|
|
||||||
unset($user->username);
|
unset($user->username);
|
||||||
unset($user->email);
|
unset($user->email);
|
||||||
unset($user->password);
|
unset($user->password);
|
||||||
|
|||||||
Reference in New Issue
Block a user